Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/EjuWCIO7Su2NnfM_TKSm6cVJS2E.roa
File: EjuWCIO7Su2NnfM_TKSm6cVJS2E.roa (raw, json)
Hash identifier: lDPHJWEQfEmp7NBAGbbbMceakMklzS1moiIjqevgRr4=
Subject key identifier: 12:3B:96:08:83:BB:4A:ED:8D:9D:F3:3F:4C:A4:A6:E9:C5:49:4B:61
Certificate issuer: /CN=eec065ac5bebaca10697530ce49248d5da6da107
Certificate serial: 019F2368D86A47A0B0EB3BE1A1AD899C4682
Authority key identifier: EE:C0:65:AC:5B:EB:AC:A1:06:97:53:0C:E4:92:48:D5:DA:6D:A1:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sBlrFvrrKEGl1MM5JJI1dptoQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/EjuWCIO7Su2NnfM_TKSm6cVJS2E.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33915
IP address blocks: 145.79.32.0/21 maxlen: 21
145.79.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/7sBlrFvrrKEGl1MM5JJI1dptoQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/7sBlrFvrrKEGl1MM5JJI1dptoQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sBlrFvrrKEGl1MM5JJI1dptoQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d8:6a:47:a0:b0:eb:3b:e1:a1:ad:89:9c:46:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec065ac5bebaca10697530ce49248d5da6da107
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=123b960883bb4aed8d9df33f4ca4a6e9c5494b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:4c:7f:48:d1:e5:41:6e:18:a7:fd:d1:8d:
be:83:e7:a4:e5:31:9c:77:d4:b8:1a:fb:13:71:5e:
17:29:09:94:24:fa:42:05:62:c7:6a:34:bd:5b:27:
eb:61:60:47:db:f1:4a:bb:84:98:8b:1f:e9:91:a4:
64:0a:15:1c:15:16:64:2c:b2:9f:53:24:87:3f:88:
4d:62:af:14:d3:ff:c3:86:ce:24:90:0b:8b:1d:fa:
f7:ff:3d:86:77:e2:44:62:23:b5:44:bd:cf:d8:8e:
9b:f4:fa:47:13:d5:01:ce:6e:ec:12:ad:95:c8:f3:
b4:fc:f0:a1:ff:78:15:cd:0f:fb:57:21:2e:42:e8:
92:5f:59:de:dd:b6:c1:2f:48:7c:82:0b:53:23:13:
f6:f6:18:99:8a:46:03:c4:ad:94:80:65:5a:f9:37:
fc:5e:d3:9a:bd:7d:3f:7a:e0:fd:00:ca:85:88:b2:
bc:04:14:2d:1f:b2:52:6d:3b:3a:0b:99:c6:97:1b:
2d:67:b0:14:1c:1a:54:51:55:2d:9b:f8:d4:75:e5:
ef:14:f0:e8:ea:29:8f:24:0a:f5:68:9f:98:c9:75:
75:9d:2a:79:74:4d:81:17:32:c5:ba:e0:bd:ae:2a:
c2:4b:6f:5c:ad:c8:1c:45:2a:35:66:4c:b9:f5:ff:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3B:96:08:83:BB:4A:ED:8D:9D:F3:3F:4C:A4:A6:E9:C5:49:4B:61
X509v3 Authority Key Identifier:
keyid:EE:C0:65:AC:5B:EB:AC:A1:06:97:53:0C:E4:92:48:D5:DA:6D:A1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sBlrFvrrKEGl1MM5JJI1dptoQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/EjuWCIO7Su2NnfM_TKSm6cVJS2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/7sBlrFvrrKEGl1MM5JJI1dptoQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.32.0/21
145.79.200.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:93:19:cc:92:bd:9d:18:cc:c1:5b:7c:76:e6:8e:6f:d8:0f:
88:25:b5:73:89:e9:34:31:e4:db:52:bd:54:3c:7c:60:de:58:
2d:73:b4:3a:68:cf:0a:7e:2e:ce:d9:44:c9:f6:39:5d:52:3d:
6c:b7:d7:1e:13:3b:65:48:26:99:24:2a:91:51:97:b4:2f:98:
81:97:0e:5f:9a:bc:b2:1c:e7:d0:17:a4:52:8a:42:21:c7:28:
1d:a7:e3:25:62:e4:fe:2a:3b:f8:5e:6e:80:3b:39:45:e8:11:
13:b9:8d:30:8a:73:29:d5:8c:fe:7b:68:f4:c8:fd:dc:53:cf:
fe:2f:f6:43:c8:bb:d7:c2:e7:bf:59:80:c0:0a:de:8f:d1:a1:
1d:0b:6f:84:89:f2:26:22:b8:33:92:4c:c0:e0:f1:dc:9e:ac:
54:d3:3b:e1:4e:19:a2:7b:83:aa:c4:43:ef:10:42:57:a9:b6:
25:f8:cc:03:60:1d:a9:38:94:c8:9d:71:2e:bd:48:53:0b:83:
53:b4:b4:ce:0e:8f:eb:f7:90:27:6b:c7:0b:e7:6b:a7:c1:34:
0c:e7:9c:e5:da:d4:fd:b1:e1:2c:8c:cd:f1:b5:f5:05:18:32:
aa:fa:78:06:2f:a2:c3:e2:69:fa:0f:9b:92:bd:5d:85:66:c5:
e2:80:58:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:54 2026 by rpki-client